WildFly Full 25 Model Reference

  1. home
  2. subsystem=elytron
  3. filesystem-realm

A simple security realm definition backed by the filesystem.

Provided capabilities(2)

Attributes (6)

  • encoded Whether the identity names should be stored encoded (Base32) in file names.
    • Attribute Value
    Default Value true
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • hash-charset The character set to use when converting the password string to a byte array.
    • Attribute Value
    Default Value UTF-8
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • hash-encoding The string format for the password if it is not stored in plain text.
    • Attribute Value
    Default Value base64
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Allowed Values base64
    hex
  • levels The number of levels of directory hashing to apply.
    • Attribute Value
    Default Value 2
    Type INT
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • path The path to the file containing the realm.
    • Attribute Value
    Type STRING
    Nillable false
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • relative-to The pre-defined path the path is relative to.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services

Operations (8)

  • add The add operation for the security realm.
    Request Parameter Type Required Expressions Allowed Default value Description
    encoded BOOLEAN false true true Whether the identity names should be stored encoded (Base32) in file names.
    hash-charset STRING false true UTF-8 The character set to use when converting the password string to a byte array.
    hash-encoding STRING false true base64 The string format for the password if it is not stored in plain text.
    levels INT false true 2 The number of levels of directory hashing to apply.
    path STRING true true The path to the file containing the realm.
    relative-to STRING false false The pre-defined path the path is relative to.
  • add-identity Add an identity to a security realm.
    Request Parameter Type Required Expressions Allowed Default value Description
    identity STRING true false The name of the identity.
  • add-identity-attribute Add an attribute to an existing identity.
    Request Parameter Type Required Expressions Allowed Default value Description
    identity STRING true false The name of the identity.
    name STRING true false The name of the attribute.
    value LIST true false The value of the attribute.
  • read-identity Read an identity from a security realm if it exists.
    Request Parameter Type Required Expressions Allowed Default value Description
    identity STRING true false The name of the identity.
  • remove The remove operation for the security realm.
  • remove-identity Remove an identity from a security realm.
    Request Parameter Type Required Expressions Allowed Default value Description
    identity STRING true false The name of the identity.
  • remove-identity-attribute Remove an attribute to an existing identity.
    Request Parameter Type Required Expressions Allowed Default value Description
    identity STRING true false The name of the identity.
    name STRING true false The name of the attribute.
    value LIST false false The value of the attribute.
  • set-password Add a password to an existing identity.
    Request Parameter Type Required Expressions Allowed Default value Description
    identity STRING true false The name of the identity.
    bcrypt OBJECT false false A password using the Bcrypt algorithm.
    clear OBJECT false false A password in clear text.
    simple-digest OBJECT false false A simple digest password.
    salted-simple-digest OBJECT false false A salted simple digest password.
    scram-digest OBJECT false false A password using the SCRAM digest algorithm.
    digest OBJECT false false A digest password.
    otp OBJECT false false A one-time password, used by the OTP SASL mechanism.